Get the latest tech news
How the British Airways' breach kickstarted today's web security challenge
The British Airways data breach of 2018
On a side note, it can be really tough to precisely pin down what data is impacted and over what timeframe because of the complexity of the attack vector's dynamic ability, especially since often website owners have no real insight into what happens in the browser of a user. This included setting up multi-factor authentication (MFA) for all remote access accounts, which adds an extra security layer to protect login credentials. This is a new set of rules created by the PCI Security Standards Council to keep debit and credit card transactions safe from data theft and fraud.
Or read this on Hacker News